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Local unitary stabilizer subgroups constitute powerful invariants for distinguishing various types 
of multipartite entanglement. In this paper, we show how stabilizers can be used as a basis for 
entanglement verification protocols on distributed quantum networks using minimal resources. As 
an example, we develop and analyze the performance of a protocol to verify membership in the 
space of Werner states, that is, multi-qubit states that are invariant under the action of any 1-qubit 
unitary applied to all the qubits. 
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I. INTRODUCTION 



Entangled multipartite quantum states of two-level quan- 
tum systems, or qubits, play a key role as resources used 
in quantum computation and quantum communication 
protocols (see, for example, [HQ, or [3, 4] for more more 
extensive surveys). In this paper, we consider a basic 
practical problem in distributed quantum computing: a 
collection of n parties will perform a distributed quantum 
computational task that requires as a resource a partic- 
ular entangled state, or more generally, any state from 
a given family of entangled states. An untrustcd source 
provides the resource states, and the parties wish to ver- 
ify that a resource state is genuine. To minimize the cost 
of verification, the parties have access to only a limited 
collection of single-qubit operations. For a survey of en- 
tanglement verification protocols, see [Bj], and for recent 
work related to this paper, see @ and its references. 

Inspired by @, in which Pappa et al. treat the verifica- 
tion test problem for the n-particle GHZ state, we present 
here a general framework for a verification test protocol 
for certain types of families of states, namely, families 
characterized by stabilizing subgroups of the local uni- 
tary group. This is motivated by the authors' previous 
work [7Hl0| that demonstrates a precise connection be- 
tween many well-known entanglement resources, such as 
the GHZ states, Werner states, and permutationally in- 
variant states that include the W states and Dicke states, 
and their stabilizer subgroups of the local unitary group. 

To illustrate the subgroup-based verification protocol 
general framework, we give a specific test for verifica- 
tion of the family of Werner states, which are those states 
stabilized by the subgroup of local unitary operators that 
consist of the same 1-qubit unitary acting on all n qubits. 

The paper is organized as follows. We begin in Section [TT1 
with the relationship between states and subgroups of the 
local unitary group. Section IIIII gives the general frame- 
work for entanglement verification tests that exploit the 
connection of states with subgroups. Then in Section ITVl 
we give an example of how the general test framework 
can be used in the case of the family of Werner states. 
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II. THE LOCAL UNITARY STABILIZER AS 
ENTANGLEMENT INVARIANT 



Given a pure state \ip) or a mixed state p of ?i-qubits, the 
stabilizer subgroup of the local unitary group is defined 

by 



Stab^ 
Stab„ 



= {g e G: gpg 1 = p} 



where G denotes the local unitary group, which can be 
taken to be G — U(l) x SU (2) n in the case of pure states, 
or more simply G = SU(2) n for mixed states. Two basic 
facts that make stabilizer groups useful in the study of 
entanglement are 

1. If two states are LU-equivalent, then their stabiliz- 
ers are isomorphic. 

2. Many classes of known useful entanglement re- 
sources are characterized by their stabilizer group. 

A consequence of the first statement is that the isomor- 
phism class (more precisely, the conjugacy class) of a 
stabilizer subgroup is an LU-invariant of the correspond- 
ing state fill ]. The second statement summarizes a pro- 
gram carried out in a series of papers for pure and mixed 
Werner states and permutationally invariant states @- 

ta. 

The basic idea used in the verification test framework 
in the next section is the following. We wish to verify 
whether a given state \*f>) is a member of a family V of 
entanglement resource states that are stabilized by all 
local unitary operations in a subgroup S of the local uni- 
tary group. We have at our disposal a measurement M 
and a function F so that F o M is constant on V . It 
may be that there are counterfeit states, that is, states 
not in V , which nonetheless pass our measurement test 
by yielding the same result as F o M applied to elements 
of V. Here's where the stabilizing group S comes in. If 
|\&) is not a genuine member of V, there are local unitary 
operations in S that take |^) to a new state |^') ^ 
Our strategy is to carefully choose a small subset of ele- 
ments of T C S and the function F so that by randomly 
applying elements of T, we guarantee a nonzero proba- 
bility that the composition F o M applied to \ty') yields 
a result different from the value of F o M on V, and thus 
will detect counterfeit states. 



III. ENTANGLEMENT VERIFICATION USING 
LOCAL UNITARY STABILIZERS 

Given a subgroup S of the local unitary group, let V(S) 
denote the space of states fixed by every element of S, 
that is, 

V(S) ={\ip)- 9 \i/>) = \i>) for all g e S}. 

The verification task. An untrusted source produces 
n-qubit pure states that are claimed to be members of 
a subspacc V = V(S) for some subgroup S of the lo- 
cal unitary group. The source distributes the qubits of 
each state it produces, one qubit to each of n parties. 
One party, the verifier, seeks to determine whether the 
states being produced are members of V. Each of the 
parties possesses a trusted 1-qubit measurement device 
that measures in the standard basis, and has the abil- 
ity to apply any of a finite collection of 1-qubit gates to 
their own qubit. Each party shares a trusted classical 
communication channel with the verifier. 

Set-up for the verification test. The verifier chooses 
a probability distribution pi,p2,...,pk and elements 
gi, <72, ■ ■ • j 9k in S and a function F that takes as inputs 
Boolean strings of length n (these come from measur- 
ing states in the standard computational basis) and pro- 
duces integer or Boolean outputs. F is required to be 
well-defined on V in the sense that if we measure a state 
\ip) G V in the standard basis, then apply F to the result, 
then we must get the same output (which, without loss 
of generality, we may take to be zero), no matter what 
post-measurement state was obtained. 

The verifier chooses elements <?» and the function F . Let 
Vo denote the space of states \ip) for which F(x) = for 
every possible value x obtained from measuring \ip) in 
the standard basis. The verifier desires the following two 
properties. 

(i) F(x) = for every x obtained by measuring states 
in V (in other words, V C Vo), and 

(ii) for every \ip) in Vo \ V, there is a gi such that gi \i[>} 
is not in Vo- 

Whether both of these properties are possible to achieve 
will depend upon the local unitary subgroup in question. 

Each gi is of the form gi = U{ ® U\ <g> • • • ® U^ for some 
Uj in U(2). Each party j is provided with the ability to 
execute the 1-qubit gates Uj ,Uj , . . . ,Uj . 

Protocol for the verification test. Given a state |\&) 
produced by the source, with qubits distributed to the n 
parties, the verifier randomly selects one of the gi with 
probability pi . The verifier instructs each party j to ap- 
ply Uj to their qubit, so that the state is now gi \^f). 
Then each party measures their qubit in the computa- 
tional basis and reports the result to the verifier. The 
verifier applies F to the binary string x resulting from 
the measurements. The verifier accepts if F(x) = 0, 
and rejects otherwise. 

It is clear that the protocol accepts states in V with prob- 
ability 1. It is less obvious but intuitively plausible that 
the protocol accepts a counterfeit state ^ V with 



probability bounded below 1. Here is the heuristic argu- 
ment. If |W) ^ V, there is some gi such that gi\^) $ Vq, 
There is a nonzero probability pi that the verifier chooses 
gi in the first step of the protocol. In this case, when we 
now measure |\&) and apply F, we are not guaranteed 
to get 0, and it seems likely that there should be a way 
to engineer the gis so that there is a guaranteed nonzero 
probability that we get an F value other than zero. The 
difficult part of proving the effectiveness of a protocol 
is showing that the collection of giS and the function F 
do indeed guarantee a nonzero probability of rejecting 
I*) V. In the next section, we give the details and 
prove that the protocol works for a test to verify mem- 
bership in the Werner subspace. 



IV. EXAMPLE: TEST FOR PURE WERNER 
SUBSPACE MEMBERSHIP 

The space W of n-qubit pure Werner states is defined to 
be those states \if>) that satisfy 

(up to phase) for all 2 x 2 unitarics U. The space W is 
sometimes called the decoherence free subspace for collec- 
tive decoherence. It is known [l2j that there arc no pure 
Werner states for odd n qubits, and the space of pure 
Werner states for even n qubits is spanned by the set of 
products of singlet states -^(lOl) — 1 10) ) in various pairs 
of qubits. 

Set-up for the Werner verification test. An un- 
trusted source produces an n = 2m qubit state |W), and 
distributes the qubits, one to each of n parties. The 
verifier, say, Party 1, chooses probability distribution 
Po = pi = 1/2 and local unitaries go = ld 7 gi = H® n , 
where H is the Hadamard matrix. Let F be the function 
that returns the number of l's minus the number of 0's 
in a rt-bit Boolean string. Observe that the value of F is 
zero on all strings x that result from measuring a Werner 
state in the standard basis. 

Werner verification protocol. The verifier selects ei- 
ther go, gi with equal probability, and instructs all parties 
to apply a Hadamard gate to their qubit if gi is selected. 
Each party j reports measurement result Xj . The verifier 
evaluates F(x) = F(x\X2 • ■ ■ x n ) and accepts |\&) if the 
the result is 0, and rejects otherwise. 

Because any Werner state |\E') is a superposition of sin- 
glet products, the protocol clearly accepts |^) when go 
is selected. Because H® n \^} = \^) and H takes the 
|0) , |1) basis to the |+) , |— ) basis, the protocol accepts 
\^>) when gi is selected. The following theorem shows 
that the probability of false acceptance of a counterfeit 
state is bounded by a probability less than 1. 

Theorem 1. Suppose that (^iPyvl^) = 1 ~ ^ where 
Pyv is projection onto the Werner subspace. Then we 
have 

Pr(accept < 1 - — (1 - m) 

where m < 1 is the maximum fidelity max{|(u|w)|} be- 
tween normalized states \u) , \v) that lie in subspaces to 
be described below. 



Comments. Wc point out that our protocol recovers 
Theorem 1 of J| for n = 2. In that case, the Werner 
subspace is the 1-dimensional span of the singlet, which 
is local unitary equivalent to |$q) m 0- The maximum 
inner product m in our Theorem 1 is 0, so the probability 
of acceptance is the same as in Q . 

Proof of Theorem 1. It is convenient to give names 
to a number of subspaces of the Hilbert space 7-L of pure 
states of n = 2k qubits. As we have already noted, let W 
denote the Werner subspace. Let S be the span of the 
weight k standard basis vectors, and let T be the span of 
the weight k + , — basis vectors. A key fact that makes 
Theorem 1 possible is that W = S n T (sec Lemma 1 in 
the Appendix). Let U = W 1 - n S and let V = W ± nT. 
Let S' = S 1 - n (S + T) and let T = T 1 - n (S + T). 
Finally, let L = (S + T)^ . For each of these spaces A, 
let Pa denote the projection onto A. Let m denote the 
maximum inner product between unit vectors in U, V, 
that is, 



as follows. 



(*\P U+V \t>) = 

(*|JV|*> = Q' 2 
(*|JV|*> = 2 



(3) 
(4) 
(5) 
(6) 



The probability of acceptance of \^>) by our protocol is 
given by 



Pr(accepttf) = i(*|P s |*> + \{*\Pt\%) 



m = max{|(V#}|: G U, \<f>) G V}, <^/#> 



!}■ 



2 o? + /3 2 
= 1 — e H — — . 



Applying Lemma 2 in the Appendix to the unit vector 
Wmrvm ' we have a2 + P 2 < (1 + m ) e i> which is in 
turn less than or equal to (1 + m)e 2 . The conclusion of 
the Theorem follows. 



Wc can write any in Ti as an orthogonal sum 

|*) = P w |*) + P u+V |*) + P L I*) . 

We further decompose Pjj+v \^) in two different orthog- 
onal sums. 

P U+V \V) = Pu\*)+Ps'\V) (1) 
Pu+v I*} = Pv\*)+Pt> I*) (2) 

Given that the trace distance from \ to the nearest pure 
Werner state vector is e, that is, (^|fVv|*) = 1 — £ 2 i we 
can define ei, £2, a., /3 (positive quantities that sum to e 2 ) 



V. OUTLOOK 

We know that m = for n = 2, and have numerically 
calculated that m = 1/2 for n = 4,6,8,10. We conjec- 
ture that m = 1/2 for n — 2k with k > 2. It will be 
interesting to apply the general stabilizer framework to 
further classes of states. 
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VI. APPENDIX 

Lemma 1. The Werner subspace W of n = 2k qubit 
pure states, that is, 

W = {|V) : U® n |V) = |V) for all U G C7(2)}, 

is the intersection S (~l T of the subspaces 

5 = span of the weight k basis vectors in the 0, 1 basis 
T = span of the weight k basis vectors in the +, — basis. 

Proof. We show in [l2j that any pure Werner state is a 
superposition of products of the singlet state ^(|01) — 
1 10) ) , so it is clear that W C S. The Hadamard matrix 

takes |0) , |1) to |+) , -), so H® n takes 



H 



i 

v/2 



1 -1 



S to T. Since H® n fixes every state in W, we have W C 
T. Conversely, suppose we have a state |V) in S P\T. 
Because \ip) G S, it is a simple calculation that 



d 
~rt~t 



(exp(iiZ) 



iexp(ztZ)) |V) = 



t=o 



where Z is the Pauli Z matrix (see, for example, Q). 
Likewise, because |V) G T, we have 



dt 



(exp(itX) 



<g> exp(ii.X')) |V) = 



where X is the Pauli X matrix. Because [iZ, iZ, . . . , iZ), 
(iX, iX, . . . , iX) generate the Lie algebra of the subgroup 
A = {(U, U,...,U):U G SU(2)} that defines the Werner 
subspace, we conclude that is in W. 

Lemma 2. Let U, V be subspaces of a Hilbert space 
H of any dimension, and let Pu,Pv be the orthogonal 



projections onto U,V, respectively. Let \^>) be a unit 
vector H, and let 



m = max{KV|<£)|: IV) G ^ 10) G V}, (V|V) = (010) = !}• 
Then 

+ (*|iV|*> < m + 1. 

Proof. Let \ty) be given. Define unit vectors \u) G 
U, \v) G V by 



|tt) 



l«) = 



(if 14") = 0, choose any unit vector in U for |u), and 
similarly for \v) in the case that Py = 0) so that we 
have 

<*|JV|*> = |<*|«>| a 

(*iivi*> = iwi 2 - 

A generalization of Bessel's inequality [l3[ says that 

mu)\ 2 +mv)\ 2 <i+\{u\v)\ 

so we have 

(*|iV|*> + (*|iV|*) 

= |(VI/| U )| 2 + 1(^^)12 

< i + K«l«>l 

< 1 + m. 



